Converting "Federated user accounts" to "Managed user accounts"

Hello Oatlhotse Gaborone

You need to take care of below considerations:

1.You must have domain added as a verified domain in your Azure AD tenant.

2.Users must be synced from on-premises AD to Azure AD with UPN like username with domain

3.Run Set-MsolDomainAuthentication -Authentication Managed -Domain Name <domain name> on ADFS Server to convert authentication from Federated to Managed.

If you are using a federation server other than ADFS, you will need to use Set-MsolDomainAuthentication cmdlet for this purpose.

Expected behavior once the above steps are done Users sign-in will no longer be redirected to on-premises federation server and UPN authentication will directly take place via Azure AD tenant where username with domain is added as verified domain.

Hope this helps. Do let us know if you have any further queries

I don't have an on-premises AD. I have recently created an Azure tenant so I am starting afresh. I am not migrating from on on-premises.

How exactly do add a verified Domain. Is adding a domain more expensive the than just running the Azure AD? I would like to minimize costs as much as possible

Hello Oatlhotse Gaborone

Based on your Previous comment to add a verified Domain Please follow the below steps.

Sign in to the Microsoft Entra admin center as a Global Administrator.Browse to Identity > Settings > Domain names

Select Custom domain names.

Select the name of the domain that you want to be the primary domain.

Select the Make primary command. Confirm your choice when prompted.

You can change the primary domain name for your organization to be any verified custom domain that isn't federated. Changing the primary domain for your organization doesn't change the user name for any existing users.

https://learn.microsoft.com/en-us/entra/identity/users/domains-manage

while adding a custom domain to Azure AD itself incurs no direct charges, the overall costs depend on domain registration, DNS services, and any optional Azure services you choose to implement. Therefore, it's essential to consider these factors when planning to use a custom domain in Azure AD.

Hope this helps. Do let us know if you have any further queries

Hello Oatlhotse Gaborone

Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back

Thank you Vigneshwar Duvva

I have two custom domains domains: [domainname] and the other one is [xxxx]. I have registered for the MS startup program & Azure tenant with [xxxx] but I use the [xxxx] for my website and email. Microsoft has also generated a domain for me xxxxxx which one should use & how do I get them verified?